$ rpki-client -vvf rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft File: xoquBsigaPIiEjEzLc1N8a8vB5Q.mft (raw, json) Hash identifier: HUq8WWws8mwTJbRSqgf3kLqKHf4BVC4ZIt1t0NmABfs= Subject key identifier: 7C:97:92:54:DB:0A:3E:07:2E:78:90:78:4A:87:C2:06:FD:6B:84:D8 Authority key identifier: C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 Certificate issuer: /CN=A915CC16/serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft Manifest number: 08EA Signing time: Thu 26 Mar 2026 20:30:53 +0000 Manifest this update: Thu 26 Mar 2026 20:30:53 +0000 Manifest next update: Thu 02 Apr 2026 20:30:53 +0000 Files and hashes: 1: xoquBsigaPIiEjEzLc1N8a8vB5Q.crl (hash: e05mO0brfbFrDCMyWmrTsQcZY2djbMRW+2MeKtc02UI=) 2: 38A2CBB88DEE11F0B9918D1FC4F9AE02.roa (hash: xgSF3MSg+ECbX1HYJEOkVDxrn/8L3wJeiao34PywgRk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CC16, serialNumber=C68AAE06C8A068F2221231332DCD4DF1AF2F0794 Validity Not Before: Mar 26 20:30:53 2026 GMT Not After : Apr 2 20:30:53 2026 GMT Subject: CN=69c5977d-3df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9a:63:72:78:ff:f3:23:f9:67:e3:46:43:a9: ff:ba:9a:b0:1f:ff:f5:0c:d2:0b:a8:72:02:42:f2: 51:26:9e:3c:e4:2a:e6:fe:86:59:00:79:fe:cf:39: 5d:e9:11:1b:12:f9:5b:33:e5:73:1d:a4:08:82:eb: fc:53:28:ea:94:ac:db:c9:7b:e3:c8:d0:e6:b0:d9: 98:0d:79:d8:f5:94:05:63:31:cb:8a:32:f2:8d:d5: 59:d4:52:73:05:f2:37:63:01:3c:ec:7d:d4:89:d7: 18:41:b4:fa:ab:05:16:ef:c8:14:b3:fd:48:bb:96: 44:f6:97:39:25:aa:43:ef:30:39:d8:f0:fb:5d:5f: 87:3d:83:42:e4:d5:1b:4a:f0:ef:8a:f2:91:bd:96: 1a:2b:33:f5:5d:05:ec:4f:c2:7f:8b:81:ab:61:38: 66:21:7e:f1:da:c9:02:10:07:72:7d:80:c9:22:8d: c8:7d:cb:50:64:3c:11:e8:29:66:7f:f2:73:54:f9: 81:a3:3a:45:01:1b:a3:4b:ab:4a:59:ad:8f:e3:4c: 19:fb:48:59:64:a9:d7:46:b9:70:10:07:b6:6a:ae: cb:da:41:7b:19:fe:6c:e7:54:bf:4a:36:b7:d9:93: 48:93:29:d9:ca:2a:0f:a3:89:31:33:9f:c4:13:f9: b1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:97:92:54:DB:0A:3E:07:2E:78:90:78:4A:87:C2:06:FD:6B:84:D8 X509v3 Authority Key Identifier: keyid:C6:8A:AE:06:C8:A0:68:F2:22:12:31:33:2D:CD:4D:F1:AF:2F:07:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xoquBsigaPIiEjEzLc1N8a8vB5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CC16/24D39D62F08011EAB5BB1037C4F9AE02/xoquBsigaPIiEjEzLc1N8a8vB5Q.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:68:d9:d0:f3:ea:b2:04:c1:48:86:3c:d5:55:39:4d:04:2a: a0:bf:1c:a1:90:a3:ef:e0:a8:e2:64:1d:18:1b:50:66:b3:c7: 79:89:9b:9a:14:af:d3:66:a8:4e:b6:f1:e7:15:81:fe:2c:1c: 74:75:9b:33:bd:db:72:0e:01:b4:74:ce:6e:c9:ff:be:5d:de: c3:73:0d:ae:9e:4d:f2:08:5e:d3:42:08:3a:ea:74:39:05:ba: 13:1f:9f:90:38:cd:95:0e:2c:5e:86:be:21:5f:35:38:34:23: 52:57:8e:7a:12:64:fa:7f:07:b7:31:60:da:6f:a0:a8:ca:5e: b6:fc:c2:27:4e:21:cd:b7:ea:b7:25:c1:9f:30:a5:f9:ce:17: 6e:61:11:61:91:1a:b3:32:84:61:98:95:4d:d1:39:e7:9c:21: 77:05:d1:1b:64:6a:13:4a:8e:74:17:39:2d:5f:e0:00:10:8e: 59:9e:02:33:af:ee:41:71:ec:e2:32:32:2c:5d:6f:1e:dc:3d: d3:19:28:ad:03:7a:30:4c:40:5c:3a:19:29:1e:a5:69:23:ba: 71:50:7d:45:bf:dc:70:00:9d:09:65:3c:7e:c4:23:82:a9:f2: 30:86:34:9c:8e:d7:b1:57:c8:0d:bd:64:b4:2c:0d:35:f3:b9: 74:d9:32:26 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Q0MxNjExMC8GA1UEBRMoQzY4QUFFMDZDOEEwNjhGMjIyMTIzMTMzMkRDRDRERjFB RjJGMDc5NDAeFw0yNjAzMjYyMDMwNTNaFw0yNjA0MDIyMDMwNTNaMBgxFjAUBgNV BAMTDTY5YzU5NzdkLTNkZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKmmNyeP/zI/ln40ZDqf+6mrAf//UM0guocgJC8lEmnjzkKub+hlkAef7POV3p ERsS+Vsz5XMdpAiC6/xTKOqUrNvJe+PI0Oaw2ZgNedj1lAVjMcuKMvKN1VnUUnMF 8jdjATzsfdSJ1xhBtPqrBRbvyBSz/Ui7lkT2lzklqkPvMDnY8PtdX4c9g0Lk1RtK 8O+K8pG9lhorM/VdBexPwn+LgathOGYhfvHayQIQB3J9gMkijch9y1BkPBHoKWZ/ 8nNU+YGjOkUBG6NLq0pZrY/jTBn7SFlkqddGuXAQB7ZqrsvaQXsZ/mznVL9KNrfZ k0iTKdnKKg+jiTEzn8QT+bEdAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUfJeSVNsK PgcueJB4SofCBv1rhNgwHwYDVR0jBBgwFoAUxoquBsigaPIiEjEzLc1N8a8vB5Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVDQzE2LzI0RDM5RDYyRjA4 MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJaUVqRXpMYzFOOGE4dkI1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveG9xdUJzaWdhUElpRWpFekxjMU44YTh2QjVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVD QzE2LzI0RDM5RDYyRjA4MDExRUFCNUJCMTAzN0M0RjlBRTAyL3hvcXVCc2lnYVBJ aUVqRXpMYzFOOGE4dkI1US5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQDRaNnQ8+qyBMFIhjzVVTlNBCqgvxyhkKPv4KjiZB0YG1Bms8d5iZuaFK/TZqhO tvHnFYH+LBx0dZszvdtyDgG0dM5uyf++Xd7Dcw2unk3yCF7TQgg66nQ5BboTH5+Q OM2VDixehr4hXzU4NCNSV456EmT6fwe3MWDab6Coyl62/MInTiHNt+q3JcGfMKX5 zhduYRFhkRqzMoRhmJVN0TnnnCF3BdEbZGoTSo50FzktX+AAEI5ZngIzr+5Bcezi MjIsXW8e3D3TGSitA3owTEBcOhkpHqVpI7pxUH1Fv9xwAJ0JZTx+xCOCqfIwhjSc jtexV8gNvWS0LA0187l02TIm -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:48 2026 by rpki-client